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Abstract — In this paper it is shown that no public announce- 
ment scheme that can be modeled in Dynamic Epistemic Logic 
(DEL) can solve the Russian Cards Problem (RCP) in one 
announcement. Since DEL is a general model for any public 
announcement scheme fill . f3l . |6|, 121], f!2l we conclude that 
there exist no single announcement solution to the RCP. The 
proof demonstrates the utility of DEL in proving lower bounds 
for communication protocols. It is also shown that a general 
version of RCP has no two announcement solution when the 
adversary has sufficiently large number of cards. 

Key words: Russian cards problem, Dynamic Epistemic Logic, 
Communication complexity, Lower bound. 



I. Introduction 

In the Russian cards problem (RCP), there are three players 
and seven cards. The cards are randomly distributed among 
the players such that two players get three cards each and the 
third player gets one card. The problem is to find a sequence of 
public announcements by which players with three cards each 
are able to acquire complete information about all the cards, 
without the third player knowing about any of their cards. 

The solution to the problem will imply a method to commu- 
nicate information among parties in a distributed computing 
setting securely without using any encryption lfT31 . 11231 . l20l . 
The analogy is that, the communicating agents and adversaries 
are modeled as players and the information to be communi- 
cated as the ownership of cards. It is generally believed that 
the above game gives unconditional security ifTTI . lfT31 . l23l . 



Various solutions to the above problem can be found in the 
literature 0, ifTOl , 0221 . They all require at least two public 
announcements. Here we address the problem of formally 
establishing that no public announcement scheme can solve the 
problem in fewer announcements. The framework of Dynamic 
Epistemic Logic (DEL) is used to establish the lower bound. 
Similar bounds using other models for related problems can 
be found in 0, 0, 0, |Q3], ifTBI. 

The following sections briefly discuss dynamic epistemic 
logic, modeling of RCP in DEL and a proof for the lower 
bound. Finally a generalization of the RCP is presented and it 
is shown that two announcements are not sufficient to solve the 
general case when the adversary has sufficiently large number 
of cards. 



II. Russian Cards Problem (RCP) 

The problem was posed in 2000 IfTTll as the following: 
From a pack of seven known cards two players each 
draw three cards and the third player gets the remaining card. 
How can the players with three cards openly(publicly) inform 
each other about their cards, without the third player learning 
from any of their cards who holds it? 

Let us call the cards 0, 1, 6. The players are Anne, 
Bill and Cath. Anne and Bill have three cards each and 
Cath has one. No secret communication is possible. Only 
announcements are allowed. The announcements are assumed 
to be truthful and public. Through a sequence of such an- 
nouncements Anne and Bill have to learn the actual deal of 
the cards, i.e., for each card from the above pack, Anne and 
Bill should be able to say to whom that card belongs. Also 
for any card from the pack other than the one Cath is holding, 
she should not be able to say to whom that card belongs. 

Various solutions to the above problem can be seen in 
the literature 0, iflOl . Il22l . All these solutions require two 
announcements. 

III. Dynamic Epistemic Logic ( DEL) 

In this paper we express the RCP in the framework of 
Dynamic Epistemic Logic (DEL). This section briefly presents 
the syntax and semantics of Dynamic Epistemic Logic. More 
detailed discussion of the DEL, examples and its applications 
can be found in 0, 0, fH, 03, ELI- 

Kripke models and action models are semantical structures 
of dynamic epistemic logic. Given a set of agents (players) 
and basic propositions a Kripke model consists of the set 
of possible states and accessibility (or indistinguishability) 
relation between the states for every agent. The knowledge 
of the players about the state of the game in imperfect 
information game£] can be modeled by viewing game states 
as Kripke states and players as agents. 

Action models model the actions of the players that will 
alter the knowledge of the players. Given an initial Kripke 
model modeling the knowledge of the players, the action 
models can be sequentially executed in the Kripke model, 
resulting in a new Kripke model that models the knowledge 
of the players after the action . 

1 In imperfect information games, players do not have complete information 
about other players' moves. 



Epistemic Language: Epistemic logic can be used to 
model knowledge in games of imperfect information 0,0, 

0, 0, 03- 

Let N be a finite set of agentfl and P be a finite set 
of propositional atoms. The Epistemic language Lp t N is the 
smallest closed set for which the following holds: 

• p E P p E Lp^n 

• <f>, ip G L P:N =4> -«f>, ((f> Aip) E Lp. N 

• 4> E Lp y N and n E N =*> K n <f> E Lp,jv 

The sentence Ki<p is read as: agent 1 knows <j> . 
(<f> V tjj),<p — » ip, and <p ip and are abbreviations for 
~^(^<p A -<ip), V ip, and (0 A ip) V (-■</> A ^-0) respectively. 
The notation T stands for -^(p A for some p E P. 

Let a finite set of agents N and a finite set of propositional 
atoms P be given. A Kripke model 11241, 0. Bl, Ifl3l is a 
tuple (W, R, V) where: 

• The set W is nonempty set of states {wi, . . .w\w\} 

• The accessibility function R : N — > 2 w ' xW ' assigns for 
each agent n E N a set of ordered pairs of states. Vn € 
AT, R{n) C W x W is an equivalence relation. 

• The valuation function V : W — > 2 P assign to each state 
a set of propositional atoms. Vu> 6 W^, V^(iy) C P. 

(w,w') E R(n) is interpreted as state w' is accessible (or 
indistinguishable) from state w for the agent n. The set of 
propositional atoms assigned to a state by V is the atoms 
which hold in that state. 

A Kripke world is a pair consisting of a Kripke model M = 
(W, R, V) and a state w E W and is denoted by (M, w). 

Semantics of Epistemic Logic:: Let a Kripke model M = 
(W, R, V) and the epistemic language Lp n be given. 

. M, w\=p-&pe V(w) 

. m, w \= o m , w y= <f> 

. M, w \= <t> A M, w (= and M, w |= V 
. M, u) |= K n 4> For all w' such that (w,w') E R(n), 
M, w' h 

A Player a; knows the fact <fr in the state w only if holds 
in all the states indistinguishable from w. Also if <j> is true in 
all the states indistinguishable from w for Player x, she can 
infer </>. 

The action models are used to update Kripke Models. An 
action model consist of a set of actions, an accessibility 
(indistinguishability) relation between the actions for every 
agent, and a precondition function for each action. 

Let a set of agents N and the epistemic language Lp t N be 
given. An Action model p, is a tuple (A, R*, II): 

• The set A is the nonempty set of actions {ai, . . . ,a\A\} 

• The accessibility function R* : N — > 2 AxA is a function 
which assigns to each agent a set of ordered pairs of 
actions. Vn E N, R*(n) C A x A is an equivalence 
relation. 

2 Players are modeled as agents. Agents are assumed to be perfect logicians, 

1. e. the agents know all the consequences of their knowledge. 



• The precondition function IT : A — > Lp t N assigns to 
every action a precondition. Va E A, IT(a) E Lp.at 

Execution: Action models are used to update Kripke 
model. Thus an action model is an operator on a Kripke Model. 
The execution of an action in a state results in a new state if 
and only if the precondition of the action holds in that state. 

Let a Kripke model M = (W, R, V) and an action model 
p = (A, R* , II) be given. The execution of action model p in 
Kripke model M results in a Kripke model denoted by M (Sip. 
M<g>n= (W, R', V) such that: 

. The set of worlds W = {(w,a) G W x A | M,w \= 
11(a)} 

• For every Player n E N, ((w,a),(w' ,a')) E R'(n) iff 
(w,w') E R(n) and (a, a') G R*(n) 

• The valuation function V' is such that V'(w, a) = V(w). 

States at any particular point carry a tag of all preceding 
actions. The state (w, a) will exist in the final Kripke model 
only if the precondition of the action a is satisfied by w in 
the initial model. Two states (if, a) and (w',a') are indistin- 
guishable for Player x in the new Kripke model if and only 
if the states w and w' were indistinguishable for the Player 
x in the initial Kripke Model and the actions a and a' were 
indistinguishable in the action model p. 

The knowledge of the players about the state of the game at 
the beginning of the game is modeled by a Kripke model. The 
knowledge actions which occur during the game are modeled 
by action models. The knowledge development is modeled 
by sequential execution of the action model in the Kripke 
model, resulting in a new up-to-date Kripke model modeling 
the knowledge of the players after the knowledge actions. 

IV. Problem Modeling 

Given the set of players and the basic propositions, the 
Russian cards problem (RCP) can be modeled in Dynamic 
Epistemic Logic (DEL). Let U = {0,1,2,3,4,5,6} be the 
set of cards and N = {a,b,c} (representing Anne, Bill 
and Cath) be the set of players. The basic propositions are 
'card is with Anne,' 'card 3 is with Bill' and so on. If i x 
denotes 'card i is with x' then the set of basic propositions 
P = {i x | x G N, i G U}. 

Initially Player a and Player b have three cards each and 
Player c has one card. The Kripke model for the initial game 
state is given by M = (W, R, V) where, 
W = {(A,B,C)\ \A\ =\B\=3,\C\ = l,AUBUC = U} 
R(a) = {((A, B, C), (A', B', C')) \A = A'} 
R(b) = {((A,B,C),(A\B',C'))\B = B'} 
R(c) = {((A, B, C), (A\ B', C')) \C = C'} 
V((A, B, C)) = {i a | i E A} U {i b | i E B} U {i c | i E C} 

In any state w = (A, B, C) the set of cards with Player 
a is A, the set of cards with Player b is B and that with 
Player c is C. R(x),x E N contains the state pairs that are 
indistinguishable for Player x. The definition of R(x) follows 
from the fact that initially Player x knows only the cards she 
is holding. Hence all the states in which her hand of cards is 
the same will be indistinguishable for her. 



For each ACU, \A\ = 3, let T A = {(A', B', C) : A' = A, 
\B'\ = 3, \C'\ = 1 and A' U B' U C = U} .Similarly for 
each B C U,\B\ = 3, let S B = {{A',B',C) : B' = B, 
\A'\ = 3, \C'\ = 1 and A' U B' U C = U} and for each 
C C U,\C\ = 1, let Q c = {(A',B',C") : C = C, \A'\ = 
\B'\ = 3 and 4'UB'U(7' = [/}. 

Hence we have: 
£(<*) = LUcc/,|A|=3 T ^ x ^ and A + A' => T A n 2> = 
= IW,'|6|=3 x 5 B and B^'4S B nS ff =K 
#(c) = Ucc£/!|C|=i x Q c and C ? C Q c nQc = V 

R(a) is a partition of 14 7 and Ta will be called a component 
of i?(a). Here W = LUca |A|=3 and the union is disjoint. 
i?(a) has (g) = 35 components each having (f) x (J) = 4 
states. All four states in any component Ta are indistinguish- 
able for Player a by the definition of R(a). 

Similarly R(b) is a partition of W and 5b is called a 
component of R(b). W = {J B cu 131=3 and the union 
is disjoint. R(b) has = 35 components each having 
(3) x (1) = ^ states and all four states in any component 
Sb are indistinguishable for Player b. 

R(c) is a partition of W and Qc is called a component of 
i?(c). W = Uccc/ |C|=i anc l tne un i° n is disjoint. i?(c) 
has (T) = 7 components each having (3) x (|) = 20 states. 
The twenty states in a component Qc are indistinguishable 
for Player c. 

As an example for A = {0,1,2}, T A = {({0,1,2}, 
{3,4,5}, {6}), ({0,1,2}, {3,4,6}, {5}), ({0, 1, 2}{3, 5, 6}, 
{4}), ({0,1,2}, {4,5,6}, {3})}. Player a cannot distinguish 
between these four states because in all the four states Player 
a's hand is {0, 1, 2}. 

Without loss of generality let us assume that Player a 
is having cards {0,1,2}, Player b is having {3,4,5} and 
Player c is having {6} initially. We denote this state by w*. 
Thus w* = ({0,1,2}, {3,4,5}, {6}). Suppose that a single 
announcement scheme solves the RCP In the final model we 
claim that there will be at least one component tJI and Sb of 
the partitions generated by R(a) and R(b) respectively such 
that T A = Sb = {w*}. This is because if one more state 
was present in the component, the Players cannot distinguish 
between those states. Also there will be at least one component 
Qc of the partition generated by R(c) such that w* G Qc and 
\Qc\ > 1- Otherwise Player c will be able to find out the actual 
state, we present the claim formally: 

Lemma 1: Assume that RCP is solved in Kripke model 
M = (W, R, V) and for all A, B and C such that \A\ = \B\ = 
3 and \C\ = 1, Ta, Sb and Qc are components of R(a),R(b) 
and R(c) respectively. Then the following statement^ hold: 

3 Let the initial state be M = (W,R, V) and the action model be pu = 
(A, R* , 7r). The states in the final model M ® /i will be a subset of W X A. 
But for notational convenience, we ignore the action-tags in the states. Hence 
the set of states in the final model is seen as a subset of W. 

4 These statements are necessary but not sufficient. 



1) 3A, 3B such that T A = S B = {w*}0 

2) VC, w* G Q c => \Qc\ > 1. 

Proof: Let w* £ Ta- If possible let Ta contain another 
state — say w\ such that w* 7^ w±. Let w* = (A,B*,C*) 
and w 1 = (A, B 1 , C 1 ). B* ^ B 1 and C* ^ C\ otherwise 
w* = w 1 . Player a cannot distinguish whether Player b is 
having B* or B 1 . Also she cannot distinguish whether Player 
c is having C* or C 1 . This means the RCP is not yet solved 
contradicting the hypothesis. Therefore T A = {w*}. Similar 
argument shows Sb = {w*}. 

VC, w* G Q c => \Qc\ > 1. If \Qc\ = 1. then c will 
understand which state she is in. ■ 

There does not exist even a single card that belongs to Player 
a in all the states of Qc- If such a card exists, say 4, Player c 
will understand that 4 is with Player a. (Recall the semantics 
for K n (f> is discussed in section [Til] ). Similarly, there does 
not exist even a single card that belongs to Player b in all the 
states of Qc- 

The above claim is tuned to our requirement of solving 
the RCP in one announcement. It is easily seen that the 
claim holds in any final model reached by any sequence of 
announcements. 

V. Lower Bound for RCP 

Theorem 1: There exist no single announcement solution to 
the RCP. 

Proof: For the sake of contradiction assume there exists 
a single announcement solution to RCP. Without loss of 
generality it can be assumed that Player a is making the 
announcement. Let the action model for the announcement 
be (j, = (A,R*,IL). 

In section [TIT] we have seen that R(a) partitions W into 
35 components. Each component will have 4 states . Suppose 
Wi,W2, W3 and W4 belong to one component — say Ta- Let 
io 1 be the actual state. Since Player a will be deterministically 
making the announcement, she will make the same announce- 
ment, say a\ for all the elements in Ta- 

In section [HI] we have seen that the states (w\,a\) and 
(1V2 , a,2 ) will be be indistinguishable for Player a if {w\ , W2) G 
R(a) and (01,02) G R*(a). So in the final model (wi,ai), 
(w2,ai), (w3,ai) and (11)4,0,1) will belong to the same 
component of R(a). This contradicts Claim [T] Hence there 
cannot be a single announcement solution to the RCP. ■ 

VI. A Generalization 

In this section we will consider a natural generalization of 
the RCP in which Anne and Bill are holding k cards each and 
Cath is holding I cards from a pack of 2k + 1 cards. We denote 
this version of the RCP as RCP(fc; I). Hence the original RCP 
discussed before is RCP(3; 1) in the new notation. 

It can be easily seen that for any k > 1 and I > 1 there 
does not exist a one announcement solution for RCP(fc; /) as 
the Theorem [T] and the proof extends to this case as well . We 

5 Actually it should be T4 = Sb = {( w *,t)}, where t is the list of 
actions that led to the final state, but for the ease of writing we have omitted 
the action tag list t. 



will now examine the impossibility of a two announcement 
solution for RCP(/c; I) using similar strategies. 

The set of cards U = {1, 2, ... ,2k + I}. The initial Kripke 
model M = (W, R, V) where, 

W = {(A,B,C)\ |A| = |B| = A, |C| = 
R(a) = {((A,B,C),(A',B',C)) \ A 
R(b) = {((A,B,C),{A',B',C'))\B 
R(c) = {((A,B,C),(A',B',C)) \C ■■ 
V((A, B, C)) ={i a \ieA}U{i b \ieB}U{i c \ieC} 

Ta, Sb and Qc are also defined similarly as in Section ITVl 
It follows that R(a) and R(b) will have ( 2 ^ ) components 



l,A(JB(JC = U} 
-A'} 
-B'} 
= C'} 



(!) = ( k ) e l ements each. 



each with ( fc +') 

Suppose Player a is making an announcement a for a set of 
components T a . Since Player c should not learn about a single 
card other than his own hand, we get the following lemma. 
Lemma 2: 

A = U (1) 



Proof: 



u 

T A eT a 

n ^ 

Assume that this 

= Q , Q c U. 



(2) 



was not the case. i.e. 



Player c can infer that the cards in U \ Q are not with Player 
a. Hence U\Q has to be 0. 

Similarly it can be seen that f] T e7 - A ~ % since if 
HtagT A = Q , Q C U, Qt^0, then Player c can infer 
that the set of cards Q is with Player a. ■ 
Before proving the impossibility of a two announcement 
solution for RCP(/c; V) we need to prove the following technical 
lemma. 



Lemma 3: For k > 2, I > ^1 

— ' — In k 



r 2k + L 



k + i 
k 



> 



Proof: Enough to have 



2k + I 



k + l 
k 



2k 



I (k- 
— x 



> 



> 



2k + l 
k 



2k + 1 
k 

(2k + l)\ 



(3) 



2k + 1 



k\ x 11 k\x(k + l)\ 



!(* + *) > ]J(i + k + i) 



i=l i=l 

2k + 1 Jt / fc 

— > n + 7T- 

4 — 1 V 

Since (1 + x) < e x 

RHS < e fe S i= ,+ii. 
Bounding the summation by integral we get, 

RHS<e k M^) = (l±^ k 



, , 2k + 1 fl + k 
Enough to have — - — > 



Let I = ?V 

In k 



2k ( lnfc 
Enough to have 2 + - — - > 1 + — — 
m k \ 2k 



In k 

since (1 + x) < e x we get ( 1 H — 

2k 



< e" 



„ 2fc /- 
.-. 2 + — > Vfc. 

Ill K 

We can see that the above equation holds for all k > 2. ■ 
Now we will prove that for sufficiently large /, there exist 

at least two states in U TAeTa Ta which are indistinguishable 

for player b for any announcement a satisfying Lemma [2] . 
Lemma 4: For k > 2, I > jK- for any announcement a 

satisfying Lemma 3si, S2 € Ut a gt -^4 sucn tnat Sl ^ 52 

and (si, s 2 ) € 

Proof: Assume that there do not exist two indistinguish- 
able states for Player b in {J Ta£7 - Ta- From Lemma [2] we 
will get \T a \ > [2^H] since \A\"= k and \U\ = 2k + I 
(as the 2k + I elements need to be distributed among sets 
of size k). Now the number of different hands possible for 



Player b should be at least |~^— ■] 



(k+l\ 

k )■ 

(2k+l 

\ k 



But the different 



By Lemma [3] 



number of combinations possible is 

|- 2fc+i -j x ^fe+ij > (2k+l\ f „, , ^ 2fc 2 

Now we will prove that there does not exist a two- 
announcement solution for RCP(fc; I) if k > 2 and I > r^r. 



j for I > and k > 2. 



Theorem 2: For k > 2, I > 



2k- 
lnfe 



there exists no two 



announcement solution to the RCP(fc; I). 

Proof: The initial Kripke model M x = (W±,Ri,Vi) 
as described above. Let Player a make the first announce- 
ment a. The action model for the first announcement is 
/ii = (Ai,i?*,rii). a G A\. Let s 1 ,s 2 G VKi be the two 
states which are indistinguishable for Player b in Ut a sT 
(si,S2) G Ri(b). Let the resulting Kripke model be M2 = 
(W 2 ,R2,V 2 ). The states (si, a), (s 2 , a) G VF 2 will be in- 
distinguishable for player b since (si,s 2 ) G Ri(b) and 
(a, a) G i2J(6). Thus ((si, a), (s 2 , a)) G R 2 (6). Hence 
Player 6 will make the same announcement say (3 for both 
these states. Let /i 2 = (A 2 ,i?2,n 2 ) be the action model 
for the second announcement with (3 G A 2 . Let the result- 
ing Kripke model be M3 = (W3, i?3,Vs). Now the states 
(si, a, j3), (s2, a., 0) G W3 will still be indistinguishable for 
Player b since ((s 1 ,a),(s 2 ,a)) G i? 2 (b) and G J2|(6). 

i.e., ((s\,a, 0), (s2,a, 0)) G J?3 (6). Hence two announce- 
ments are not sufficient to solve the RCP(fc; I) if I > ^rc- 



VII. Conclusion 

We have analyzed the Russian Cards Problem and the gen- 
eralization RCP(fc; I) in the framework of Dynamic Epistemic 
Logic. It is shown that there does not exist a single an- 
nouncement solution for the Russian Cards Problem within the 
framework of Dynamic Epistemic Logic. Since the framework 
is considered sufficiently general ifTTI . |6), ETI . Ifl2l we 
claim that there can be no one-announcement solution to RCP 
in general and no two announcement solution to RCP(fc; I) for 
I > k > 2. 

— In k ' — 

The problem of deriving upper and lower bounds for 
RCP(/c; I) in general in terms of k and I remains open for 
further investigation. 
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